Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/_iGFugOP1tiOEaPOTqAHoHJWFQc.roa
File: _iGFugOP1tiOEaPOTqAHoHJWFQc.roa (raw, json)
Hash identifier: 8esaTWX6gTmO0Sy1HkL3uRDiAwcID3fH35AmBjVF024=
Subject key identifier: FE:21:85:BA:03:8F:D6:D8:8E:11:A3:CE:4E:A0:07:A0:72:56:15:07
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0196105332393E9DED164C2553C339F1432B
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/_iGFugOP1tiOEaPOTqAHoHJWFQc.roa
Signing time: Mon 07 Apr 2025 12:56:49 +0000
ROA not before: Mon 07 Apr 2025 12:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 109.122.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:53:32:39:3e:9d:ed:16:4c:25:53:c3:39:f1:43:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Apr 7 12:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe2185ba038fd6d88e11a3ce4ea007a072561507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:6b:eb:5c:33:78:ba:8b:10:8e:9f:2f:4a:
ab:75:4d:19:38:23:2a:69:90:06:81:88:a2:bb:8d:
02:8f:12:a1:5e:7c:1b:ee:ea:0d:70:be:33:86:44:
0e:4d:bd:2c:ed:de:ae:a9:ac:21:ac:b0:85:55:c1:
0a:25:70:38:a1:eb:25:72:99:5f:6a:ad:38:04:b0:
bd:7c:8d:fb:57:4b:c4:bd:61:8e:f9:5a:7d:8b:a6:
94:f7:08:19:77:cc:0f:97:b5:d0:88:41:7e:92:ea:
41:62:36:96:c4:e5:98:0a:20:12:b6:7b:d0:c5:db:
45:19:85:06:6a:af:79:b0:d7:7c:f7:38:4a:1d:d7:
a4:4c:51:2f:8e:8a:6a:68:d9:3f:9b:ad:4a:e3:07:
08:6a:1d:9a:d7:6b:e8:9d:22:02:2f:4c:a9:69:b4:
cc:40:21:62:bf:c5:6e:b4:c8:99:76:29:85:1f:fa:
7a:8d:40:82:7c:68:d5:a6:33:a5:b2:6e:e2:e1:cf:
70:cf:c1:2e:2c:55:b3:16:af:86:62:45:8d:76:0f:
66:f4:bf:40:44:68:59:30:31:16:e4:76:31:52:17:
64:9a:c2:e0:11:c3:ee:ed:24:d4:89:7d:88:86:d3:
97:a2:44:cc:80:01:d7:52:23:dd:64:fc:74:3d:85:
c3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:85:BA:03:8F:D6:D8:8E:11:A3:CE:4E:A0:07:A0:72:56:15:07
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/_iGFugOP1tiOEaPOTqAHoHJWFQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.240.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:96:2f:f8:ef:29:06:5f:c7:e9:08:81:c2:0f:c6:4c:b6:e8:
12:ab:62:be:b4:2c:17:e2:87:e6:b1:44:ac:c0:47:96:d3:df:
a1:76:b6:35:40:f8:80:f0:1c:d0:ae:0a:ce:40:91:09:8e:1c:
1e:11:ed:ee:72:31:b8:ac:c6:6c:60:a8:3c:61:f6:79:78:83:
eb:60:fa:4c:91:d3:45:1a:2b:51:8b:a0:41:57:91:44:de:60:
10:49:f5:62:60:91:4d:34:cd:f6:ea:3f:a5:05:52:60:8f:fd:
8b:23:30:bc:71:81:03:cc:ef:13:78:18:5c:21:57:18:bc:19:
43:29:fb:96:3d:d0:db:ed:42:45:b6:0b:93:e6:9f:3d:33:72:
30:e5:4f:fe:a3:f8:fb:75:53:ab:2f:73:2e:ab:64:99:bf:84:
a3:e4:1e:b6:f8:5a:a0:db:3e:3d:c8:db:50:b8:4a:56:5b:03:
16:8b:81:fb:47:4b:bc:15:37:1b:b2:44:53:e3:ad:05:26:3e:
49:ea:6d:44:3a:34:3c:eb:c7:bf:05:55:8d:b3:27:55:c6:38:
ba:ce:34:e7:a5:32:df:bf:21:19:b3:dd:3b:0f:5f:bb:55:5c:
07:0f:52:82:98:3b:3d:39:5d:5f:f1:fc:37:b3:2c:f8:12:c7:
14:8d:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net